Microsoft Fundamentals MS-900 Questions & Answers

• Question 1:

  A company plans to deploy a customer relationship management (CRM) solution.

  The solution must provide enterprise resource planning (ERP) integration as well as artificial intelligence (AI) tools. You need to choose a solution that meets the requirements. What should you choose?

  A. SharePoint Online

  B. Microsoft 365

  C. Power Platform

  D. Dynamics 365

  Correct Answer: D

• Question 2:

  A company uses Microsoft 365.

  You need to assign licenses to users.

  Which two portals can you use? Each correct answer presents a complete solution.

  NOTE: Each correct selection is worth one point.

  A. Azure Active Directory admin center

  B. Microsoft Compliance Manager

  C. Microsoft 365 admin center

  D. Security and Compliance Center

  Correct Answer: AC

• Question 3:

  A company is evaluating Microsoft 365.

  You need to identify concepts of using the principle of least privilege.

  Which two concepts should you identify? Each correct answer presents a complete solution.

  NOTE: Each correct selection is worth one point.

  A. Just-in-time access

  B. Just-enough-access

  C. Azure AD multifactor authentication

  D. Blocking legacy authentication

  Correct Answer: AB

  A: Microsoft Purview Privileged Access Management allows granular access control over privileged admin tasks in Office 365.

  Privileged access management requires users to request just-in-time access to complete elevated and privileged tasks through a highly scoped and time-bounded approval workflow. This configuration gives users just-enough-access to

  perform the task at hand, without risking exposure of sensitive data or critical configuration settings.

  B: This configuration gives users just-enough-access to perform the task at hand, without risking exposure of sensitive data or critical configuration settings. Enabling privileged access management allows your organization to operate with

  zero standing privileges and provide a layer of defense against standing administrative access vulnerabilities.

  Note: See step 5 below.

  Guidelines to Deploy the Least Privilege Access Strategy

  Having recognized the importance of least privileged access, now it's time to set it up in your Office 365 tenant. So, we’ve outlined a set of guidelines you must follow to deploy the least privileged access below.

  Step 1: ‘Identify’ all the existing highly privileged accounts. Get a complete view of all the local administrator and domain administrator accounts, as they hold many sensitive data.

  Step 2: ‘Validate’ the existing privileges, such as who has access to which applications, systems, servers, devices, etc.

  Step 3: ‘Revoke’ all unnecessary and unused privileges and make sure no extra privileges are granted to any users.

  Step 4: ‘Monitor’ all the accounts that are provisioned for high-privileged roles (administrator accounts).

  Step 5: ‘Grant’ only just-in-time access and just enough access for the accounts whenever necessary.

  Step 6: ‘Review’ – Review permissions granted to all applications, users, or other cloud-based environments. Implement privileged access management in your organization to work with zero-standing privileges and have a deeper level of

  security against suspicious vulnerabilities.

  Reference:

  https://learn.microsoft.com/en-us/microsoft-365/compliance/privileged-access-management

  https://blog.admindroid.com/empower-your-microsoft-365-security-with-least-privilege-access

• Question 4:

  A company wants to improve interaction between users.

  The company requires information about collaboration features in Microsoft Excel for Microsoft 365.

  You need to identify Excel collaboration features for the company.

  Which two features should you identify? Each correct answer presents a complete solution.

  NOTE: Each correct selection is worth one point.

  A. co-authoring

  B. threaded comments

  C. line focus

  D. mail merge

  Correct Answer: AB

  A: You can collaborate on Excel workbooks at the same time with co-authoring.

  You and your colleagues can open and work on the same Excel workbook. This is called co-authoring. When you co-author, you can see each other's changes quickly—in a matter of seconds. And with certain versions of Excel, you'll see

  other people's selections in different colors. If you're using a version of Excel that supports co-authoring, you can select Share in the upper-right corner, type email addresses, and then choose a cloud location. But if you need more details,

  like which versions are supported and where the file can be stored, this article will walk you through the process.

  B: Excel for Microsoft 365 has changed the way comments work. Comments are now threaded, and allow you to have discussions with other people about the data. Notes are for making notes or annotations about the data, and work like

  comments used to work in earlier versions of Excel.

  Reference:

  https://support.microsoft.com/en-us/office/collaborate-on-excel-workbooks-at-the-same-time-with-co-authoring-7152aa8b-b791-414c-a3bb-3024e46fb104

  https://support.microsoft.com/en-us/office/the-difference-between-threaded-comments-and-notes-75a51eec-4092-42ab-abf8-7669077b7be3

• Question 5:

  A company has Microsoft 365 E3 licenses.

  Users require Microsoft 365 E5 licenses instead of the Microsoft 365 E3 licenses.

  You need to recommend a licensing solution that minimizes costs.

  What should you recommend?

  A. Step-up user subscription licenses

  B. Add-on user subscription licenses

  C. Software Assurance user subscription licenses

  D. Fun user subscription licenses

  Correct Answer: A

  What is a Step-up License

  Some Microsoft software and online service products are available in multiple editions (i.e. lower edition and higher edition). Examples of this are, Exchange Server is offered as the lower edition Exchange Server Standard and the higher

  level edition Exchange Server Enterprise, or Exchange Online is offered as Exchange Online Plan 1 and Exchange Online Plan 2. The Step-up License makes it easier for you to move from a lower level edition to a higher level edition without

  incurring the full cost of licensing two separate editions of the product

  Microsoft Online Services

  Microsoft online services offer Step-up licenses for many transition scenarios between edition plans. Step-up SKUs are generally available when an online service is offered in more than one edition plan (for example, Microsoft 365 E5 Step-

  up from Microsoft 365 E3). At your next renewal, you can choose to renew the higher-level edition full SL.

  Check with your Microsoft Partner to confirm if Step-up SKUs are available for your online service.

• Question 6:

  A company uses Microsoft 365.

  The company has the following reporting requirements:

  1.

  Number of users connecting to Microsoft 365 services from Microsoft browsers.

  2.

  Number of files in SharePoint Online.

  3.

  Number of files in OneDrive.

  You need to meet the company's reporting requirements.

  Which admin center or portal should you use?

  A. Microsoft 365 compliance portal

  B. Microsoft 365 admin center

  C. Exchange admin center

  D. SharePoint

  Correct Answer: B

  * Microsoft 365 Reports in the admin center

  Check out Microsoft 365 small business help on YouTube.

  You can easily see how people in your business are using Microsoft 365 services. For example, you can identify who is using a service a lot and reaching quotas, or who may not need a Microsoft 365 license at all. Perpetual license model won't be included in the reports.

  Reports are available for the last 7 days, 30 days, 90 days, and 180 days. Data won't exist for all reporting periods right away. The reports become available within 48 hours.

  * Microsoft 365 Reports in the admin center - SharePoint site usage

  As a Microsoft 365 admin, the Reports dashboard shows you the activity overview across various products in your organization. It enables you to drill in to get more granular insight about the activities specific to each product. For example,

  you can get a high-level view of the value you are getting from SharePoint in terms of the total number of files that users store in SharePoint sites, how many files are actively being used, and the storage consumed across all these sites.

  Then, you can drill into the SharePoint site usage report to understand the trends and per site level details for all sites.

  How to get to the SharePoint site usage report

  In the admin center, go to the Reports > Usage page.

  From the dashboard homepage, click on the View more button on the SharePoint card.

  Reference:

  https://learn.microsoft.com/en-us/microsoft-365/admin/activity-reports/activity-reports

  https://learn.microsoft.com/en-us/microsoft-365/admin/activity-reports/sharepoint-site-usage-ww

• Question 7:

  A company plans to implement Microsoft Sentinel.

  You need to describe the capabilities of Microsoft Sentinel.

  Which two sets of capabilities does it provide? Each correct answer presents a complete solution.

  NOTE: Each correct selection is worth one point.

  A. security orchestration, automation, and response

  B. numeric score to measure an organization's security posture

  C. security and management of devices, data, and users for managed service providers

  D. security information and event management

  Correct Answer: AD

  Microsoft Sentinel, in addition to being a Security Information and Event Management (SIEM) system, is also a platform for Security Orchestration, Automation, and Response (SOAR). One of its primary purposes is to automate any recurring and predictable enrichment, response, and remediation tasks that are the responsibility of your Security Operations Center and personnel (SOC/SecOps), freeing up time and resources for more in-depth investigation of, and hunting for, advanced threats.

  Reference: https://learn.microsoft.com/en-us/azure/sentinel/automation

• Question 8:

  A company needs to protect users from malicious URLs and attachments that are in emails.

  You need to select a solution that meets the requirement.

  Which service should you select?

  A. Microsoft Defender for Office 365

  B. Microsoft Defender for Identity

  C. Microsoft Defender for Endpoint

  D. Microsoft Cloud App Security

  Correct Answer: A

• Question 9:

  A company is evaluating Microsoft Azure Conditional Access policies.

  You reed to determine which scenarios Conditional Access policies support.

  Which three scenarios should you select? Each correct answer presents a complete solution.

  NOTE: Each correct selection is worth one point.

  A. Multi-factor authentication

  B. Self-service password reset capabilities

  C. Hybrid Azure Active Directory joined device

  D. Blocked access to Microsoft 365 services for unverified users

  E. BitLocker deployment

  Correct Answer: ACD

  AC: Common Azure Conditional Access policies decisions

  *

  Block access

  Most restrictive decision

  *

  Grant access Least restrictive decision, can still require one or more of the following options: Require multi-factor authentication Require device to be marked as compliant Require Hybrid Azure AD joined device

  Require approved client app Require app protection policy (preview)

  D: For customers with access to Identity Protection, user risk can be evaluated as part of a Conditional Access policy. User risk represents the probability that a given identity or account is compromised.

  Reference:

  https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/overview https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/concept-conditional-access-conditions

• Question 10:

  You need to identify which license to use for BitLocker.

  Which license should you identify?

  A. Office 365 E3

  B. Microsoft 365 E3

  C. Windows 365 Standard

  D. Microsoft Dynamics 365 Sales Professional

  Correct Answer: B

  To manage Bitlocker via CSP (Configuration Service Provider), except to enable and disable it, regardless of your management platform, one of the following licenses must be assigned to your users:

  Windows 10/11 Enterprise E3 or E5 (included in Microsoft 365 F3, E3, and E5). Windows 10/11 Education A3 or A5 (included in Microsoft 365 A3 and A5).

  Reference: https://learn.microsoft.com/en-us/windows/security/information-protection/bitlocker/bitlocker-management-for-enterprises